Import or Export Lists for Context Hub

As an administrator you can import or export a list that is configured in the Context Hub service which can be used by an analyst. The file to be imported or exported is a CSV file and you can add multiple lists as Data Sources.

Prerequisites

Ensure that Context Hub is enabled and the service is available in netwitness_adminicon_25x22.png (Admin) > Services view of NetWitness.

Import a List

After you have imported a list, you can perform the following tasks:

  • Import values to an existing list
  • Add row to a list
  • Edit a list name and description
  • Edit a value from a list
  • Delete a list
  • Delete row from a list

Note: You have to make the same changes to the relevant .CSV file, so that the changes get reflected the next time the schedule recurs. Otherwise, when you import values into an existing single-column or multi-column list, the data is overwritten from the source file when the schedule recurs. In case of a custom feed list, if the feed is edited or deleted, the corresponding Context Hub list also gets edited or deleted.

Import Single-Column List

To import a list:

  1. Select netwitness_adminicon_25x22.png (Admin) > Services.
    The services view is displayed.
  2. In the Services panel, select the Context Hub service and click netwitness_ic-actns.png > View > Config.
    The Services Config View of the Context Hub service is displayed.
  3. Click the Lists tab.
    The Lists tab consists of the Lists panel and List Values panel.
    The below image is an example of single-column list.
    121_List-tab-SC_1122.png
  4. Click netwitness_ic-import.png on the Lists panel.
    The Import List dialog is displayed.
    netwitness_f-import-list_409x142.png
  5. In the Import List dialog, complete the following steps:
    1. In the Upload File (.CSV) field, browse and select the CSV file.
    1. In the Delimiter field, select the delimiter to separate the values in a list from the options—Comma, CR (Carriage Return), and LF (Line Feed).
  6. Click Upload to upload the CSV file to Context Hub.

These lists are considered as data sources for retrieving contextual information. But you can append to an existing multi-column list. The data will be appended only if the number of columns match.

Note: You cannot create a new multi column list by directly importing a CSV file. However, all the feeds that are converted into multi-colum lists will be displayed in the List tab. For information on how to import multi-column list, see Configure Lists as a Data Source

Import Values to an existing List

When you are importing into existing multi- column list the data is overwritten from the source file when the schedule recurs.

To import values to a list:

  1. Go to netwitness_adminicon_25x22.png (Admin) > Services.
    The services view is displayed.
  2. Service and click netwitness_ic-actns.png > View > Config.
    The Services Config View of the Context Hub service is displayed.
  3. Click the Lists tab.
    The Lists tab consists of the Lists panel and List Values panel.
  4. In the Lists panel, select a list for which you want to import the values.
  5. Click netwitness_ic-import.png on the List Values panel.
    The Import List dialog is displayed.
  6. In the Import List dialog, complete the following steps:
    1. In the Upload File (Csv) field, browse and select the CSV file.
    2. In the Delimiter field, select the delimiter to separate the values in a list from the options—Comma, CR(Carriage Return), and LF(Line Feed).
  7. Click Upload to upload the CSV file to NetWitness.

The list values are imported to the selected list. These lists are considered as data sources for retrieving contextual information. But you can append an existing multi column list. The data will be appended only if the number of column match.

Export List for Context Hub

To export a list:

  1. On the Lists tab of the Services Config view of the Context Hub service, click netwitness_ic-export.png.
    The Export dialog is displayed.
    netwitness_10.6export.png
  2. In the Delimiter field, select the delimiter to separate the values in an exported list from the drop-down [Comma, CR (Carriage Return), and LF (Line Feed)].
  3. Click Export.

In case of a single-column list, you can select the delimiter. And, in case of a multi-column list, the list is exported as CSV file to the local machine.

Note: When a custom feed is converted into a Context Hub list, you must map at least one meta key with one or more entity mapping for a column header with a meta. However, if you want to add or edit more entities you can do so by clicking netwitness_ic-actns2.png.